Subprocessors Directory

MailSend maintains strict vendor vetting and data protection standards. This directory lists all third-party entities authorized to process customer personal data.

Last reviewed: September 17, 2026 • In compliance with GDPR Article 28(2)

About Our Subprocessor Due Diligence

Under Article 28 of the General Data Protection Regulation (GDPR) and our Terms of Service, MailSend conducts thorough technical, operational, and security reviews before engaging any third-party subprocessor. Each subprocessor is bound by contractual obligations to implement robust security safeguards, process data solely on our written instructions, and maintain confidentiality.

Enterprise customers may request notifications of any prospective additions or changes to this directory by emailing [email protected].

United States (US-East)

Amazon Web Services (AWS)

Email & Cloud Infrastructure

Provides cloud computing, SMTP relay, and Amazon Simple Email Service (SES) infrastructure for reliable message delivery.

Scope of Data:Email headers, recipient addresses, message body content, sender domains

United States (AWS US-East)

Supabase Inc.

Database & Authentication

Hosts primary PostgreSQL database clusters, user authentication identities, and multi-tenant row-level access control.

Scope of Data:User profile data, workspace configurations, template layouts, suppression records

Global Edge Network

Cloudflare, Inc.

Security, CDN & DNS

Edge proxy routing, global DNS verification, DDoS mitigation, and SSL/TLS edge certificate termination.

Scope of Data:IP addresses, request headers, transit metadata

India / Global

Razorpay Software Pvt. Ltd.

Primary Payment Gateway & Billing

Processes merchant subscription payments, card authorizations, recurring renewals, invoicing, and tax accounting.

Scope of Data:Billing contact details, tokenized payment method IDs, transaction history

United States / Global

PayPal, Inc.

International Payment Processing

Handles cross-border and international currency transactions via integrated Razorpay checkout.

Scope of Data:Tokenized payment identifiers, transaction confirmation status

United States

Functional Software, Inc. (Sentry)

Application Monitoring

Real-time error logging, software crash reporting, and frontend/backend performance diagnostics.

Scope of Data:Anonymized stack traces, browser user-agents, error diagnostics (PII scrubbed)

United States / European Union (depending on configured hosting region)

PostHog, Inc.

Product Analytics

Measures product usage and feature adoption to help improve the MailSend application and user experience.

Scope of Data:User identifiers, email address, product interaction events, device and browser metadata

United States

Google LLC (Google Analytics)

Web Traffic Analytics

Measures aggregate page views and marketing reach on public website routes (subject to cookie consent).

Scope of Data:Anonymized IP, device screen size, referring page

United States

Google LLC (Google Cloud / Gemini)

AI Technology Provider

Powers optional AI email generation, tone optimization, and subject line recommendations when requested by users.

Scope of Data:User-submitted drafting prompts and template drafts

Global Edge

ImageKit Global

Asset Delivery

High-performance CDN optimization and hosting of static media assets and platform brand icons.

Scope of Data:Public image assets, static logos

Questions Regarding Subprocessors?

If your security or compliance team requires a signed Data Processing Addendum (DPA) or vendor assessment questionnaire, please reach out to our legal department.

Contact Legal & Compliance